I’m the Never Ending Pie Throwing Robot, aka NEPTR.
Linux enthusiast, programmer, and privacy advocate. I’m nearly done with an IT Security degree.
TL;DR I am a nerd.
If all you need is a simple note taking app, I recommend Notesnook. It is free and open source and offers E2EE cloud syncing. That is what I used as a Google keep alternative. Silverbullet is good, but may be too feature-full for something as simple as a Keep replacement.
Docker is good when combined with gVisor runtime for better isolation.
gVisor is an application kernel, written in memory safe Golang, that emulates most system calls and massively reduces the attack surface of the kernel. This is important since the host and guest share the same kernel, and Docker runs rootful. Root inside a Docker container is the same as root on the host, as long as a sandbox escape is used. This could arise if a container image requires unsafe permissions like Docker socket access. gVisor protects against privilege escalation by only using root at the start and never handing root over to the guest.
Sydbox OCI runtime is also cool and faster than gVisor (both are quick)
I liked qdirstat